Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: TbrFxmft81rwxSFcnN4/HVDZnIVylm2qrRNg+2YA19o=
Subject key identifier: 01:5A:76:69:DD:B0:A3:B9:FC:62:56:FD:43:97:83:9F:85:9C:D6:56
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 0197CB39EC4AE7FF1BC428B31E6709DB934B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0DA9
Signing time: Wed 02 Jul 2025 13:01:00 +0000
Manifest this update: Wed 02 Jul 2025 13:01:00 +0000
Manifest next update: Thu 03 Jul 2025 13:01:00 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: tSn5d93wEUqTf41Z/LIXWxuK9KqFlVOwqOkyZAW2iyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:ec:4a:e7:ff:1b:c4:28:b3:1e:67:09:db:93:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Jul 2 13:01:00 2025 GMT
Not After : Jul 3 13:01:00 2025 GMT
Subject: CN=015a7669ddb0a3b9fc6256fd4397839f859cd656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:99:d2:a1:02:c1:1e:b3:2b:50:91:b8:2f:
14:d6:45:5a:db:01:7e:78:5a:82:63:5c:5b:a0:71:
b3:7e:25:a0:8a:0f:cb:62:78:27:21:da:07:41:28:
ac:2d:98:7e:dc:c9:58:ec:6b:f1:66:6f:bd:cb:d1:
34:49:e6:cd:2f:7a:8d:52:bc:15:1e:72:a0:79:ca:
96:89:7f:29:ae:12:3d:77:7d:47:ac:6e:62:60:32:
6e:ea:c3:01:c1:fc:82:d9:49:8b:d8:f0:83:9c:e3:
b0:59:8d:eb:4a:58:ab:7f:4d:36:a0:2e:da:bf:cf:
16:c1:54:15:0c:0c:61:d4:9e:f8:61:72:97:99:d7:
f1:38:45:0a:d1:a7:92:55:a7:67:a7:c6:a1:95:9b:
a9:d8:b6:60:48:46:84:84:72:1d:ae:00:88:c4:5c:
ee:8c:57:3a:5f:26:a8:0c:84:6f:c6:44:b7:af:a5:
6c:02:a2:ed:08:9d:91:34:2b:d4:47:6a:58:3f:e2:
75:8a:4a:20:eb:bd:cd:8c:1c:48:e3:e5:04:30:23:
d8:2b:82:1c:60:f8:24:30:29:fe:b3:e7:76:51:6a:
f6:00:18:9d:2d:58:3a:ef:4d:d5:5c:80:ae:67:50:
27:de:23:17:21:00:7b:62:9e:f6:b6:1c:14:7b:1d:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:76:69:DD:B0:A3:B9:FC:62:56:FD:43:97:83:9F:85:9C:D6:56
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d8:da:25:c1:92:96:1a:f0:93:d2:74:34:d8:64:92:9d:6d:
25:0c:7b:eb:75:ee:72:5b:8b:3a:78:bb:08:ee:5e:1d:6e:f6:
99:1f:f1:a6:ef:87:44:76:f7:12:de:6f:cf:4e:b4:2a:a6:e3:
35:52:b2:51:ba:b4:a6:e5:ce:53:3e:69:f2:76:31:54:98:7b:
d4:0e:44:25:35:e5:c3:21:d0:e2:31:66:c7:7c:fb:60:ed:6d:
fd:c8:7b:66:bb:46:a0:3b:64:2c:d7:20:ac:28:a9:9f:d9:d2:
cf:7d:87:76:98:39:60:c3:14:ee:64:24:d8:f7:93:96:c3:d6:
48:3a:aa:e6:7c:fd:06:1d:08:f5:86:fc:ac:5e:6e:f0:09:a0:
42:70:13:f5:df:a8:b5:e7:10:fb:57:67:a9:9c:a8:06:78:e7:
d1:0a:5b:fb:1b:ad:8f:85:66:0d:dd:35:3b:60:45:9f:02:89:
da:cf:38:19:c3:d0:ae:59:3e:c3:fd:67:9a:9c:65:80:46:01:
e0:2f:aa:45:4a:c2:97:d5:4f:dd:3d:e6:3a:e2:ba:50:85:9e:
1d:bc:ce:2d:8e:97:3c:9f:ba:7f:0f:50:1d:c4:2b:50:d5:72:
05:96:c6:28:21:e5:8f:a3:a2:d0:a0:a4:51:93:82:f6:cc:7e:
75:35:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:42:00 2025 by rpki-client